SQL Injection (Blind) - DVWA
Perform a blind SQL injection attack to retrieve the database version.
DVWA Writeups
Damn Vulnerable Web Application (DVWA) is a PHP/MySQL web application that is damn vulnerable. Its main goal is to be an aid for security professionals to test their skills and tools in a legal environment, help web developers better understand the processes of securing web applications and to aid both students & teachers to learn about web application security in a controlled class room environment.
Stored Cross Site Scripting (XSS) - DVWA
Trigger an alert pop-up with cookie values using Stored XSS.
Weak Session IDs - DVWA
Identify the cookie session ID pattern.